*** Wartungsfenster jeden ersten Mittwoch vormittag im Monat ***

Skip to content
Snippets Groups Projects
Commit aef78139 authored by entlein's avatar entlein
Browse files

adding SELinux stuff such that Openstack cloud controller can boot while SELinux is set to enforced

parent 6a2e27b2
Branches
No related tags found
1 merge request!1Restore main as the default branch
File added
......@@ -20,6 +20,7 @@
- rke2-selinux
- ca-certificates
- openssl
- setools-console
state: latest
......@@ -57,6 +58,31 @@
name: etcd
group: etcd
#Download the mozilla root CA into the right directory, and update the trust chain
- name: Download root CA
get_url:
url: https://curl.se/ca/cacert.pem
dest: /etc/ssl/certs
- name: Update CA trust
shell: update-ca-trust
#Let openstack cloud controller access the /etc/ssl/certs directory (SELinux)
- name: Enable SELinux
selinux:
policy: targeted
state: enforcing
- name: Copy SELinux Policies
template:
src: ../selinux/my-openstackcloud.pp
dest: /etc/selinux/targeted/policy/my-openstackcloud.pp
- name: Activate SELinux Policies
shell: semodule -i /etc/selinux/targeted/policy/my-openstackcloud.pp
- name: Ensure /var/lib/rancher/rke2/server/manifests
file:
path: /var/lib/rancher/rke2/server/manifests
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment